Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
File:                     4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa (raw, json)
Hash identifier:          L/nE0l5AFanEID80vhVeN615S2r5v5Ue96yZcutEYS4=
Subject key identifier:   B2:F6:91:61:05:B6:C2:BC:77:29:47:A0:1D:B0:8F:59:FF:CE:21:3D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F4328584F497BCC8831677BACA3865B30
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa
Signing time:             Fri 25 Sep 2026 01:00:12 +0000
ROA not before:           Fri 25 Sep 2026 01:00:12 +0000
ROA not after:            Thu 24 Dec 2026 02:00:12 +0000
asID:                     7155
IP address blocks:        184.21.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Sep 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:49:7b:cc:88:31:67:7b:ac:a3:86:5b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Sep 25 01:00:12 2026 GMT
            Not After : Dec 24 02:00:12 2026 GMT
        Subject: CN=e924399d-d3ad-4511-bd64-433af9380faf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ec:b5:36:ec:b9:f3:69:ef:2e:43:00:6a:df:
                    9c:74:8f:51:cc:94:61:01:a4:55:4f:4c:d6:86:43:
                    59:85:04:79:dc:ae:44:5e:21:4d:71:c6:4e:46:e1:
                    32:33:c1:8e:80:3e:55:73:f7:c9:cc:05:f9:a5:a5:
                    74:e9:fe:d4:53:ef:0b:1b:31:44:bb:44:f6:67:19:
                    58:51:ec:c8:03:2b:2b:5a:81:e7:46:65:32:24:25:
                    af:c2:ea:7a:b8:a6:bd:3b:a1:5c:58:fa:a6:e3:18:
                    84:92:ac:45:a4:cb:0f:53:d2:95:72:e9:69:a5:29:
                    5d:a0:ee:64:66:e9:c9:e0:78:5e:99:74:76:11:5f:
                    1c:68:a2:07:3b:c8:d5:21:e8:c1:8e:d9:f6:c6:1f:
                    3e:6d:3e:cd:f4:63:3c:e9:01:c0:3e:71:40:a0:41:
                    83:39:31:2d:81:23:36:46:1d:15:76:a6:05:06:88:
                    e2:a1:d6:da:48:b2:c3:37:0b:95:a7:da:aa:23:f4:
                    33:42:d6:37:36:c5:0b:59:53:7f:71:db:1f:ed:40:
                    85:10:f5:f5:22:95:6c:e5:df:62:14:0e:dd:74:7a:
                    7c:94:e3:98:a8:09:6d:b0:89:73:d5:ef:80:ee:6a:
                    4e:00:91:79:bd:41:9b:e9:f1:b3:3a:6f:e3:b3:f9:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:F6:91:61:05:B6:C2:BC:77:29:47:A0:1D:B0:8F:59:FF:CE:21:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c5710a2-9e7a-3de1-876a-8be4aa28db69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.21.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:a1:da:1f:84:be:14:97:0a:34:fe:9d:8d:01:16:9c:8d:2f:
         8b:39:2a:1a:09:8b:8f:65:7d:4f:ff:70:56:e8:e4:0f:9e:cd:
         53:54:17:61:8e:39:91:fa:c0:40:f8:78:5b:34:70:b4:26:33:
         38:b3:f0:06:82:d4:69:26:d8:47:d6:1a:f8:90:d4:30:9d:05:
         b9:11:64:e7:69:53:cf:08:90:8b:36:2a:0c:ca:2b:47:fe:da:
         d5:b5:7f:de:45:95:6d:03:39:af:7b:f4:a5:54:5c:4c:37:08:
         dd:de:07:bf:e6:81:df:56:10:ad:94:c1:5b:c8:9b:73:06:f5:
         e3:9d:b3:80:f4:51:d7:07:f6:44:75:2c:49:c1:55:e7:4a:05:
         ef:e0:ed:2c:2f:32:f8:c7:68:f3:bc:c1:16:f7:9d:78:f8:db:
         88:48:32:2d:0b:53:03:63:fe:07:58:f7:08:30:c9:fa:81:1d:
         e1:4e:38:a6:29:6b:24:f8:c7:20:f0:ac:59:35:21:c9:f8:02:
         79:4b:fb:93:8f:e8:07:fe:f9:84:b2:6d:ec:25:6d:7c:39:c0:
         73:3f:0e:78:5b:c1:d3:78:5c:d6:bc:72:8e:54:fe:4e:d9:f8:
         84:57:f7:e0:9d:9d:86:a6:17:f6:b7:e7:e6:0a:ef:fc:b6:d6:
         ae:a3:25:11
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je8yIMWd7rKOGWzAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTkyNDM5OWQtZDNhZC00NTExLWJkNjQtNDMzYWY5MzgwZmFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9uy1Nuy582nvLkMAat+cdI9RzJRhAaRVT0zW
hkNZhQR53K5EXiFNccZORuEyM8GOgD5Vc/fJzAX5paV06f7UU+8LGzFEu0T2ZxlY
UezIAysrWoHnRmUyJCWvwup6uKa9O6FcWPqm4xiEkqxFpMsPU9KVculppSldoO5k
ZunJ4HhemXR2EV8caKIHO8jVIejBjtn2xh8+bT7N9GM86QHAPnFAoEGDOTEtgSM2
Rh0VdqYFBojiodbaSLLDNwuVp9qqI/QzQtY3NsULWVN/cdsf7UCFEPX1IpVs5d9i
FA7ddHp8lOOYqAltsIlz1e+A7mpOAJF5vUGb6fGzOm/js/nqIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLL2kWEFtsK8dylHoB2wj1n/ziE9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGM1NzEwYTItOWU3YS0z
ZGUxLTg3NmEtOGJlNGFhMjhkYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuBXhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKh2h+EvhSXCjT+nY0BFpyNL4s5KhoJi49lfU//cFbo5A+ezVNUF2GO
OZH6wED4eFs0cLQmMziz8AaC1Gkm2EfWGviQ1DCdBbkRZOdpU88IkIs2KgzKK0f+
2tW1f95FlW0DOa979KVUXEw3CN3eB7/mgd9WEK2UwVvIm3MG9eOds4D0UdcH9kR1
LEnBVedKBe/g7SwvMvjHaPO8wRb3nXj424hIMi0LUwNj/gdY9wgwyfqBHeFOOKYp
ayT4xyDwrFk1Icn4AnlL+5OP6Af++YSybewlbXw5wHM/DnhbwdN4XNa8co5U/k7Z
+IRX9+CdnYamF/a35+YK7/y21q6jJRE=
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:02:07 2026 by rpki-client